Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Problems removing MacSecurity-alert malware


  • Please log in to reply

#1
Meg123

Meg123

    Member

  • Member
  • PipPip
  • 21 posts
I checked this site's Malware Cleaning Guide first but step 2 only gave me Windows options and I have a Mac desktop. Apple security alert told me to go to the Activity Monitor and look under Process Name for the app to quit - "common app names include MacDefender, MacSecurity or MacProtector.
Unfortunately, none of those names is showing up and I don't know enough about computers to know which ones of the 78 app names showing are legitimate and which are suspect. What should I do? I cannot even close Safari until I say OK to the System Alert signal from macsecurity-alert and turning the computer on and off did not help at all. (I am having to use my iPad to send this message, can't use my computer.)
Thank you!
  • 0

Advertisements


#2
aido

aido

    Member

  • Member
  • PipPip
  • 49 posts

Please follow this steps: https://support.appl.../en-us/HT202225

 

If you still have problems after steps done post here I'm going to help you so far as I know :)


Edited by aido, 24 May 2015 - 02:36 AM.

  • 0

#3
Meg123

Meg123

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts
That is the site I went to that didn't help because it says "Under the Process Name column, look for the name of the app and click to select it; common app names include: MacDefender, MacSecurity or MacProtector." None of those names are present. I do not know which of the 78 app names is the right one to remove and I don't want to remove an app I shouldn't. I guess the only thing to do is to type in here the 78 apps and see if you can tell which one is the offender:
Activity Monitor, activity moitord, Adobe AIR Installer, Adombe reader and acrobat updater, aiprort base station agent, aosnotifyd, applepushserviced, applespell.service, autofsd, backupd-helper, blued, cijscannerregister, com.apple.dock.extra, configd, controlcenter, coreaudiod, coreservicesd, cvmserver, dbfseventsd (listed 3 times), diskarbitrationd, diskmanagementd, distnoted (listed 3 times), dock, dpd, dropbox, dynamic_pager, filecoordinationd, finder, flipshareautorun, fontd, fseventsd, galileod, hidd, hp product research, image capture extension, imagent, installd, kernel_task, kerneleventagent, kextd, launchd (listed 3 times), logind, loginservier, loginwindow, lsboxd, mdnsresponder, mds, mdworker (listed 2ce), netbiosd, netserver, notifyd, ntpd, ocspd, opendirectoryd, pboard, photo stream, powerd, ptmd, revisiond, safari, sarafi web content, securityd, software update, stackshot, suhelperd, syslogd, systemstarter, systemulserver, talagent, taskgated, updater, usbmuxd, usbserver, usereventagent (listed 2ce) , vdcassistant, warmd, warmd_agent, windowserver.
Thank you.
  • 0

#4
aido

aido

    Member

  • Member
  • PipPip
  • 49 posts

1. Please download AdwareMedic. Open the DMG, install and start it.

2. Choose Scan for Adware. Results will be move to the trash.

3. Still in AdwareMedic choose from the menu Scanner Take System Snapshot

4. If it done click on Copy to Clipboard and post the log here.

 

 

May I ask can you deal with the Terminal? If so, please open it. Open Spotlight (cmd + space) and type Terminal.app. Hit enter to open it.

Type the following command:

kextstat | grep -v com.apple

Insert the line above in your Terminal with drag and drop or copy and paste - what your prefer and hit enter. Copy the result from there and insert it in your next answer.


  • 0

#5
Meg123

Meg123

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts

I downloaded and ran AdwareMedic. It did not find any ads but did not give me a spot anywhere to Take System Snapshot. The only menu I have gives 3 options: Scan for Adware (which immediately runs the scan but never gives an option to do anything else), Next Steps (which tells me I can choose Take System Snapshot from the Scanner Menu but doesn't give me any advice where to find that) and Get Help (which opens the pdf instructional manual.) I must be missing something somewhere.

 

I'm not very computer savvy and don't now what the Terminal is. This is my home computer, so I assume I have access to everything - where do I find the Terminal?

 

Thank you.


  • 0

#6
aido

aido

    Member

  • Member
  • PipPip
  • 49 posts

1. Please open AdwareMedic

2. Go to the menu Scanner and click on it. Choose from there the option Take System Snapshot. You must enter your password. See the Picture.

3. If the Scan done a window appears with the results. Click on the button on this window called  Copy to Clipboard. A copy is in the Clipboard now.

4. Paste the content here in your next post with the key combination Command + V.


Edited by aido, 25 May 2015 - 02:13 PM.

  • 0

#7
Meg123

Meg123

    Member

  • Topic Starter
  • Member
  • PipPip
  • 21 posts

Is this what you are writing about? Computer doesn't seem to be hung up like it was before, but I don't know if it's safe to enter passwords or if I have malware. Is there a good anti-malware system for Mac that you would recommend?

AdwareMedic 2.2.3 system report - Thursday, May 28, 2015 @ 7:54:09 PM
Mac OS X version 10.7.5
19:54  up 3 days, 17 mins, 1 user, load averages: 0.38 0.98 1.25
 
Safari extensions
---------------
None
 
Chrome extensions
---------------
/Users/megpope/Library/Application Support/Google/Chrome/Default/Extensions/aapocclcgogkmnckokdopfmhonfmgoek
     Name: Google Slides
     Modified: Thursday, January 1, 2015 @ 9:00:41 AM
/Users/megpope/Library/Application Support/Google/Chrome/Default/Extensions/boadgeojelhgndaghljhdicfkmllpafd
     Name: Google Cast
     Modified: Thursday, January 1, 2015 @ 9:01:12 AM
/Users/megpope/Library/Application Support/Google/Chrome/Default/Extensions/felcaaldnbdncclmgdcncolpebgiejap
     Name: Google Sheets
     Modified: Thursday, January 1, 2015 @ 9:00:40 AM
 
Firefox extensions
---------------
None
 
Login items
---------------
iTunesHelper, Adobe Media Player, Dropbox, Fitbit Connect Menubar Helper, AdobeResourceSynchronizer, IOBackB, HP Scheduler, HP Product Research
 
Startup items
---------------
total 0
drwxr-xr-x@ 5 root  wheel  170 Oct 20  2010 HP IO
drwxr-xr-x  5 root  wheel  170 Jun  4  2008 USBVision Startup
 
System startup items
---------------
None
 
User launch agents
---------------
total 32
-rw-r--r--  1 megpope  megpope  603 Aug 31  2014 com.adobe.ARM.202f4087f2bbde52e3ac2df389f53a4f123223c9cc56a8fd83a6f7ae.plist
-rw-r--r--  1 megpope  megpope  589 Oct 19  2010 com.adobe.ARM.32fc92aadecf45c6150edfbd059d518c174248ca67bf63e4a9386b86.plist
-rw-r--r--  1 megpope  megpope  618 Dec  1  2011 com.apple.AddressBook.ScheduledSync.PHXCardDAVSource.537596F2-D0BE-4A39-9B5F-03E4A68E9A18.plist
-rw-r--r--@ 1 megpope  megpope  804 Jan  1 09:00 com.google.keystone.agent.plist
 
System launch agents
---------------
total 24
-rw-r--r--  1 root  wheel  432 Sep 22  2011 com.brother.LOGINserver.plist
-rw-r--r--  1 root  wheel  479 Sep 18  2010 com.flipvideo.FlipShare.AutoRun.plist
-rw-r--r--  1 root  admin  605 Jul 28  2009 com.hp.help.tocgenerator.plist
 
System launch daemons
---------------
total 16
-rw-r--r--  1 root  wheel   462 Apr 11 22:50 com.adobe.fpsaud.plist
-rw-r--r--  1 root  wheel   421 Nov 29  2011 com.apple.remotepairtool.plist
-rw-r--r--  1 root  wheel  1161 Oct  5  2012 com.fitbit.galileod.plist
 
Third-party kernel extensions
---------------
None
 
User cron tasks
---------------
None
 
Root cron tasks
---------------
Error getting cron tasks. (-128)
 
launchd.conf contents
---------------
None
 
DNS settings
---------------
Server: 75.75.75.75
 
Hosts file
---------------
##
# Host Database
#
# localhost is used to configure the loopback interface
# when the system is booting.  Do not change this entry.
##
127.0.0.1 localhost
255.255.255.255 broadcasthost
::1             localhost 
fe80::1%lo0 localhost
 
Scan log
---------------
2015-05-25 13:55:56: ----- Scan Started -----
2015-05-25 13:55:56: Scanning with signatures version 67
2015-05-25 13:56:03: No adware found
2015-05-25 13:56:03: ----- Scan Ended -----
2015-05-25 13:59:42: ----- Scan Started -----
2015-05-25 13:59:42: Scanning with signatures version 67
2015-05-25 13:59:54: No adware found
2015-05-25 13:59:54: ----- Scan Ended -----
2015-05-25 14:00:15: ----- Scan Started -----
2015-05-25 14:00:15: Scanning with signatures version 67
2015-05-25 14:00:18: No adware found
2015-05-25 14:00:18: ----- Scan Ended -----
2015-05-25 14:01:49: ----- Scan Started -----
2015-05-25 14:01:49: Scanning with signatures version 67
2015-05-25 14:01:53: No adware found
2015-05-25 14:01:53: ----- Scan Ended -----

  • 0

#8
aido

aido

    Member

  • Member
  • PipPip
  • 49 posts

Hello,

 

I don't see anything on your computer. Only  what I see is your DNS Server Settings. Possible redirections by Comcast?

 

Do you have still  problems with MacSecurity alerts? Usually if you are surfing that it is possible that you visit a site that open security windows made by javascript. This is not a problem because this does not effect the mac. Unless you have manually doing anything (download, install such software). 

 

You don't need any Antivirus for mac. Mac has a built-in security with Gatekeeper and XProtect. But I you need one I have made good experiences with ClamXAV, Sophos for mac and Eset Cybersecurity - this is not a recommendation for any product!


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP